C:\Users\Jaeyung\Desktop\anti\INT2D\Debug\INT2D.pdb
Static task
static1
Behavioral task
behavioral1
Sample
76b4ecf236fe88aae28d160d539101a2_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
76b4ecf236fe88aae28d160d539101a2_JaffaCakes118.exe
Resource
win10v2004-20240729-en
General
-
Target
76b4ecf236fe88aae28d160d539101a2_JaffaCakes118
-
Size
31KB
-
MD5
76b4ecf236fe88aae28d160d539101a2
-
SHA1
d99a88e879c773f208ab362d15d3f65629427d62
-
SHA256
9b7ed2181aab9adac831a6a1fda9f44a02821995f7c40a06d224b1b5c4dea7dc
-
SHA512
3745c7e16897cbfb93fa57b129e16ac0cb9485a4ee581316b91a21a3c0b3127f77b37f1b928d589bde9705a4201c580039e181881d50fe72886b36db6f3e15d7
-
SSDEEP
384:nY9qbk6ombmpGPyWzQDgVsyisYpEvbvuW5LOb:nFbXoBpGPjQDgVvYpSjPJA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76b4ecf236fe88aae28d160d539101a2_JaffaCakes118
Files
-
76b4ecf236fe88aae28d160d539101a2_JaffaCakes118.exe windows:6 windows x86 arch:x86
3f3f1c35ce885fd97b28ddb4b227cecb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegQueryValueExW
RegOpenKeyExW
msvcr120d
__crtTerminateProcess
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_lock
_unlock
__crtUnhandledException
__dllonexit
_onexit
_invoke_watson
_controlfp_s
_except_handler4_common
wcscpy_s
_wmakepath_s
_wsplitpath_s
_crt_debugger_hook
_commode
_fmode
__initenv
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
exit
_CrtSetCheckCount
_CrtDbgReportW
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
_CRT_RTC_INITW
printf
strstr
_calloc_dbg
_strlwr
kernel32
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryExW
GetProcAddress
GetLastError
RaiseException
IsDebuggerPresent
EncodePointer
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ